Test network services
Inventory and test explicitly authorized network services with bounded discovery and protocol-aware validation. Use for approved hosts, address ranges, ports, TLS, banners, service versions, authentication, exposure, segmentation, configuration, packet evidence, or narrowly reviewed vulnerability checks when rate, source, third-party boundaries, and stop conditions are explicit.From its SKILL.md
npx -y skills add gaelic-ghost/socket --skill test-network-servicesAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 6 stars6 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
2.1 KB, 326 tokens by cl100k_base, as published. Nobody here has run it
Test Network Services
Overview
Establish what is actually listening and reachable before making vulnerability claims. Keep discovery, identification, configuration review, authentication tests, and exploit validation as separate authorized levels.
Read references/network-test-levels.md before selecting tools or scan intensity.
Workflow
- Load approved targets/exclusions, source addresses, network path, time/rate limits, credentials, and contacts.
- Resolve target identity.
- Record DNS, addresses, cloud/CDN/load-balancer ownership, environment, and routes; stop on third-party or out-of-scope resolution.
- Discover conservatively.
- Start with known assets and low-rate reachability/port checks; record tool/version/options, packet source, loss, and filtering.
- Identify services.
- Validate protocol, TLS/certificate, banner/version, authentication exposure, and application behavior instead of trusting port numbers or one fingerprint.
- Assess configuration and exposure.
- Review unnecessary listeners, network boundary, encryption, weak/default access, anonymous behavior, management interfaces, and segmentation from approved vantage points.
- Validate vulnerability candidates.
- Review scanner/template logic and use the smallest protocol-aware proof; route protocol mechanics to
network-protocol-skills.
- Review scanner/template logic and use the smallest protocol-aware proof; route protocol mechanics to
- Stop and clean up.
- Halt on instability, rate-limit distress, unexpected sensitive data, third parties, or scope drift; close sessions and remove temporary access.
Output
Return target resolution, discovery coverage, validated services, configuration/exposure observations, vulnerability candidates/validation, negative results, impact, and cleanup.
What ships with it: 2 files
965 B alongside SKILL.md
agents/
- openai.yaml244 B